{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-8143"],"ecosystem":"PyPI","epss":0.00486,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKYH4B0R67KRW8CKV936S","modified_at":"2024-10-31T19:44:10.976096Z","published_at":"2024-10-29T13:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-113","https://huntr.com/bounties/71c5ea4b-524a-4173-8fd4-2fbabd69502e","https://github.com/gaizhenbiao/chuanhuchatgpt/commit/ccc7479ace5c9e1a1d9f4daf2e794ffd3865fc2b"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2024-113","url":"https://osv.dev/vulnerability/PYSEC-2024-113"}],"summary":"In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a"}